Skip to content

RHEL 9 library files must have mode 755 or less permissive.

An XCCDF Rule

Description

If RHEL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process. This requirement applies to RHEL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.

ID
SV-257884r991560_rule
Version
RHEL-09-232020
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure the library files to be protected from unauthorized access. Run the following command, replacing "[FILE]" with any library file with a mode more permissive than 755.

$ sudo chmod 755 [FILE]